CVE-2016-2275

Critical

Published: 21/02/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The web interface on Advantech/B+B SmartWorx VESP211-EU devices with firmware 1.7.2 and VESP211-232 devices with firmware 1.5.1 and 1.7.2 relies on the client to implement access control, allowing remote attackers to perform administrative actions via modified JavaScript code.

Risk Assessment

Attackers can gain unauthorized access to administrative functions of the devices, potentially leading to serious security breaches within the organization.

Recommendation

It is recommended to update the device firmware to the latest version and implement additional security measures to mitigate the risk of attacks.

Original NVD description (English source)

The web interface on Advantech/B+B SmartWorx VESP211-EU devices with firmware 1.7.2 and VESP211-232 devices with firmware 1.5.1 and 1.7.2 relies on the client to implement access control, which allows remote attackers to perform administrative actions via modified JavaScript code.